Update README with a simple plugin attack plan.