Add support for plugins which are marked insecure in the blocklist to the CTP plugin manager.

This doesn't support the use case where an administrator wants to keep blocking insecure plugins but allow normal ones. I don't think that really matters in the enterprise setting, though.