Http client permissions Today every plugin can call every url through http client. User should know them and allo them.