After that discussion, I thought of another potential solution: host the plugin inside of RoonBridge, and pipe the audio through that process. Plugin configuration would happen locally on the machine where RoonBridge was running.
Not perfect, but probably the appropriate compromise for supporting pre-existing plugin systems with architectural limitations.