First pass on PluginTrustTracker

This updates issue #52. Still need to add hostname validation.