Actually, after looking more at how we can break things with this, I think it should go in through the admin socket with a "break at your own risk" warning, rather than being a startup option at all. Can we do that?