PSA: Sponge will not support automagically giving mods to the client

[gratimax]

I think this pretty much answered the question already (especially the second half)

Custom Maps Auto-Download Plugins Client Side

The claim that plugins could be able to download potentially malicious plugins from Ore “without authorization” is true. In fact, a lot of security risks come from the fact that Sponge runs plugins without sandboxing, which means this point (and many others like it) is absolutely moot. It also means any “security features” in place to have some sort of authorization for plugins programmatically from Ore are absolutely pointless, for many reasons mentioned above. Plugins can literally do anything…