Just some background on this.
The param file is for defaults, so once Deadline’s populated the defaults it won’t make much difference.
The API doesn’t support making plugin changes. At the moment there’s no way to layer security on who is allowed to make plugin changes. For example, we disable the command line plugin on a new install, but that access would allow scripts running as any user to re-enable it. I’ve brought it up internally before but it’s dependent on a sort of security layer. I’m neither sure nor can share where that’s at though.
I’ve added the ask to our tracking issue however!