I agree this part stinks. And it doesn't include pubkeys.

We really need a better way to manage the plugins