CO Administrators should not need access to the shell for any tasks. This means
- AvailablePlugins should be enabled via the UI (perhaps constrained by the CMP Admin)
- FileSource should accept files via the UI or API
- JobShell should allow manual runs via the UI (CO-1310)
CMP Administrators might still use the shell for certain tasks, such as performing upgrades.