function enableWithoutCertMisMatchWorkaround(requestedJREVersion) {
  // Non-IE browser are okay
  if ('MSIE' != deployJava.browserName) return true;

  // if DT plugin is 10.0.0 or above, return true
  // This is because they are aware of both SUN and Oracle signature and
  // will not show cert mismatch dialog that might cause deadlock
  if (
    deployJava.compareVersionToPattern(
      deployJava.getPlugin().version,
      ['10', '0', '0'],
      false,
      true
    )
  ) {
    return true;
  }

  // If we got there, DT plugin is 6uX

  if (requestedJREVersion == null) {
    // if requestedJREVersion is not defined - it means ANY.
    // can not guarantee it is safe to install ANY version because 6uX
    // DT does not know about Oracle certificates and may deadlock
    return false;
  }

  // 6u32 or earlier JRE installer used Sun certificate
  // 6u33+ uses Oracle's certificate
  // DT in JRE6 does not know about Oracle certificate => can only
  // install 6u32 or earlier without risk of deadlock
  return !versionCheckEx('1.6.0_33+', requestedJREVersion);
}
returns true if we can enable DT plugin auto-install without chance of
deadlock on cert mismatch dialog

requestedJREVersion param is optional - if null, it will be
treated as installing any JRE version

DT plugin for 6uX only knows about JRE installer signed by SUN cert.
If it encounter Oracle signed JRE installer, it will have chance of
deadlock when running with IE.  This function is to guard against this.