I have not looked into 3.0 yet. If the module has an install method, it can be called, because it can not be protected.