Allow admins to disable remote plugin installation

Some systems might prefer to block remote plugin installation,
requiring the user to instead have access to the server's own
$site_path/plugins directory before code can be injected into
the installation.

Change-Id: I16bd9de83e022a15767fd29ce9e2fb55674f103b
9 files changed