Securely load a comments plugin from domains people are already logged into? (security.stackexchange.com)