Preserve trusted plugin and automatic ACP permission models. Track release and remaining validation in #546.