MDL-37485 plugins overview: require_login before _capability.