only allow reading capability for tasks, io, and render plugins of settings