@jhalvorson I lean toward option A. When Flash player and other plugins
are updated I do the following: disable the policy clear the logs of the
policy change the smart group to reflect the new version number add the
updated package to the policy and...