Mass deploying managed Firefox

Well, this is yet another issue I am running into with Firefox. I work in K-12, which means by certain federal regulations I am required to filter the Internet usage of the students. I also work in a 1:1, so I have over 6,000 Macbooks and about 2,000+ Mac desktops. The problem is basically this with out writing a short novel to explain it: I need to lock down firefox so students cannot install add ons, clear history, and insert their own network/proxy settings into the app itself. Since Firefox is a complete self contained application and it ignores all system settings of OS X for it's own this is an issue. There is an add on called public fox, which does work well, but an end user can just delete their profile information in their home directory and that protection is now gone. The second issue is, that if I push out the package to the end users with my copy of the files it works, but it doesn't retain passwords. If I copy the add ons I added to lock it down and drill them into the actual application contents of Firefox they are there, but with out any of the settings I put. I also tried modifying the user template so when a user logs in they get those firefox settings but again they can still delete them. I am trying to avoid modifying the POSIX permissions for the files in question as I don't want to have to maintain scripts for a permissions nightmare and if some IT staffer I work with decides to run "repair permissions" as a troubleshooting step it just undoes what I did. Basically, from what I have been reading up on, Firefox is a huge pain to mass deploy in a managed way so that the app itself is managed the way you want it. Any ideas, pointers, or has anyone here accomplished what I am trying? Thanks Tom