They learned that trick from Google and Chrome; search for `com.google.keystone.agent.plist` -- they install a Launch Agent for you.