developer-experience 1 Security Gates With No Keys: When Plugin Safety Blocks Legitimate Use Apr 2, 2026