Add an extension for when a user requests a deployment

There is a decision of whether to put this before or after the permissions check.
I opted for after, since of the potential security implications.
A safe default saves peoples lives.
I suppose $data alone is best. Better than trying to predict what extensions should do... that's really up to developers right?