Changes

|Feature non-goals=We can't prevent users getting owned up by vulnerable plugins if they choose to activate a plugin on a site hosting malicious payloads. That is why driving plugin updates is important.<br/>

|Feature functional spec=Phase 1:

Users can turn on a preference to require click to play for all plugins