And also allows the user to choose to not install it.

A proper warning with regards to remote code execution is displayed,
even though it could only happen if the "attacker" has valid ERP5
credentials.

@Tyagov, please review.

/reviewed-on nexedi/wendelin!18