Why is the required permission removed? Now, anyone (not just an admin with MANAGE_SETTINGS) can enable or disable a plugin