Security Vulnerability #100

FluxCast setup path installs a system-wide D-Bus policy whose default context lets any local user call org.freedesktop.DBus.Properties.Set on fi.w1.wpa_supplicant1; this is a broad persistent privilege grant in the plugin's required dependency path. The same advertised dependency's DLNA/Chromecast path starts an unauthenticated screen-stream server on 0.0.0.0:8080 at FluxCast v0.2.3 commit a74f39f with predictable stream paths, so other reachable hosts can view the live desktop during casting.