Ok, but can someone comment, document something on security of
installing extensions for normal users? Does allowing access to
extension provides a way to circumvent security model? If not why
can't it be allowed for user installations (provided that extension
was previously allowed in some conf file)?