there can still be some improvements made around extension, like requiring a signing mechanism, and copying them to a safe directory before executing them