Going to contract Mark Jaquith at http://coveredwebservices.com/ for a couple hours of consulting near the end of the month. Going to have him review parts of the plugin to ensure security is top notch.