that's the correct way I believe as well. I've got some ideas around community providers and support for installing plugins from github releases. currently the plugin install cli just expects a http server address, so if you want someone else to install it you have to put it in a filebucket somewhere