I tested that a capability can be disabled for any user role, but I found nothing to block the capability of a plugin. I