I'm not blocking the engines access to the CVARs, I prevent the remote access to them via the server status request of the game browsers.
When you define a CVAR you can set some flags. One of those flags makes the CVAR appear in the server status report (that's what causes the problem). All this plugin does is defining those CVAR before other plugins do (CVARS can only be defined once
) - but without the "export" flag (I don't know the correct name).