It would be more friendly to let the admin choose what to do. Running --install in a cron job without asking and without an opt-out is clearly not that friendly.
I'd say we need 3 options in the spirit of: * --install automatically * just check --status, and output weekly reminders [should maybe be the default] * don't do anything (valid, eg. for machines in non-internet-connected networks still making use of flash internally)
