Allow config to force install/protect plugins

This will allow site administrators to select a set of plugins that will
not be able to be uninstalled or change priority through the normal
plugin management interface.