I've got the following improvement:
This rewrites every connection to the control panel from HTTP to HTTPS. Maybe you can make a "if/than" case in the installer where you ask for permanent redirect for the control panel? Or maybe an option in the panel to activate it? It's only a small improvement of security...
Greetings