I did it "programmatically" for our org by post-processing the install of
the framework by editing the XML file to give full trust. Since all the
security is defined in an XML file, this was fairly simple to do during the
original install of the framework.