Currently with MOAP we can either have it enabled globally or disabled globally. When it's globally disabled, a user can click to activate a MOAP object. If it's enabled globally a user can add an object to an explicit "deny" list.

I would like to see an implementation of an explicit "allow" list that a user can specify objects or remote sites that are always allowed to run, even if the MOAP functionality is globally disabled therefor bypassing the need to 'click to activate' every time that object is in range.