* [security] fix(plugin): require explicit trust for project plugins * test: clarify project plugin secure-default behavior
Hinotobi