Is it an unacceptably bad idea to allow auto updates as well? Anything potentially problematic here could also be done with a code change, but at least this contains a flag to opt-out.