Thanks for this. As Markus mentioned, full disclosure may not have been the
preferred route, but the fault is all mine as I contributed the Ploticus
I'm currently working on a whitelisted, prefab-only version of SRF-Ploticus.
Script mode will be totally disabled, but SMW users who want custom plots
can always do it securely by adding their own custom scripts in their
ploticus prefabs directory.