Why not just come up with a separate installer for the browser plugin. The runtime isn't as bad security-wise. Or is it?