That would be one of the different settings. For running unlisted extensions, iirc it's actually pretty trivial to get one signed; back when they abandoned Shumway it didn't take me more than a few minutes with the command line to get a signed xpi that I then installed on several computers. I might be remembering wrong, though.