Some plugins expose additional functionality that should only be exposed to users with permission to access them. We could perhaps allow plugins to add sub-permissions to the existing 'plugins' flag to facilitate this?