The add-on in question is FlowCrypt (flowcrypt.com). We need to have a stable, predictable origin to enable in CORS, but the add-on ID changes upon every install. Is there a way for an add-on to have a stable ID/origin? How is this accomplished? We are using the addons.mozilla.com self-publish mechanism, where I'm having Mozilla sign each release, but then we are self-hosting a json file at https://flowcrypt.com/api/update/firefox the individual xpi fles. Thanks a ton!