restrict access to testaccount automation plugin using capability