Retstrict changes to plugins to auth'd users