How would you design a secure, cross-platform auto-update mechanism for a desktop security agent at McAfee?