Hide the "plugin:command" suggestion from tab completion and unpermitted commands.
The plugin tests for every command in the tab completion and removes the ones where the issuer doesn't have permission.
If the command is still shown, probably plugin misses the permission specification in plugin.yml