Hi, sorry if I spoil your party by returning to the topic, but I wanted to state my opininon regarding sv_pure:
- even if the presence of a sv_pure / a similar system presents only a small technical challenge in an open source game, it still is a moral/psycological/maybe even legal obstacle for cheaters. So it should generally be kept, but of course it shouldn't get in the way of "harmless" modifications if possible.
- generally the server owner should be able to decide which mods are allowed on his server, just like the server owner can choose which players he allows on his server.
- the player also has to agree which mods he wants to use. Usually this agreement is given by the installation of the mod, but if auto-downloading is enabled, this may not be automatically assumed.
So in my opinion it should work like this: the server announces which pk3s are required and which additional pk3s are allowed. The client then has to check which of these paks he is allowed to use, by checking its configuration or asking the player. When the player chooses not to use a required pak, he can't join the game of course. If he chooses to use a pak not available locally, the client should try to download it.
Bonus points if the player could choose separately to allow only data or also qvms contained in the pak.