Some kind of user confirmation should be enough to authorizethis add-in, as RIA Flex said, like webCam access or some big popuptelling the risks etc. Not having this feature is what is stoppingme(and a lot I guess) to develop an e-learning application usingit.