This is something the auditors asked for, which I thought might be worth merging into master.
The branch also fixes a bug with settings namespaces (the UI was using "tor" and "bt" whereas the plugins were using their transport IDs, which are no longer "tor' and "bt"), and replaces some string literals with constants to avoid similar bugs in the future.