Detect the extension, request allow-list approval, open or reuse a controlled tab, focus it again, then close it. Tiny, clear, and honest.
RTOconnectOnceallowlisttabKeyDOM safeRTOconnectOnce()tabKey reuse for one controlled tabA tiny truth: if the host is not allow-listed yet, the plugin should refuse control. That is a feature, not a bug.