PLUGIN_API:
  # Permission labels (independent of admin plugin)
  ACCESS_SITE: "Site"
  ACCESS_SITE_LOGIN: "Login to Site"
  ACCESS_ADMIN: "Admin"
  ACCESS_ADMIN_LOGIN: "Login to Admin"
  ACCESS_ADMIN_SUPER: "Super User"
  ACCESS_ADMIN_CACHE: "Clear Cache"
  ACCESS_ADMIN_CONFIGURATION: "Configuration"
  ACCESS_ADMIN_CONFIGURATION_SYSTEM: "Manage System Configuration"
  ACCESS_ADMIN_CONFIGURATION_SITE: "Manage Site Configuration"
  ACCESS_ADMIN_CONFIGURATION_MEDIA: "Manage Media Configuration"
  ACCESS_ADMIN_CONFIGURATION_SECURITY: "Manage Security Configuration"
  ACCESS_ADMIN_CONFIGURATION_INFO: "See Server Information"
  ACCESS_ADMIN_SETTINGS: "Settings"
  ACCESS_ADMIN_PAGES: "Manage Pages"
  ACCESS_ADMIN_MAINTENANCE: "Site Maintenance"
  ACCESS_ADMIN_STATISTICS: "Site Statistics"
  ACCESS_ADMIN_PLUGINS: "Manage Plugins"
  ACCESS_ADMIN_THEMES: "Manage Themes"
  ACCESS_ADMIN_TOOLS: "Access to Tools"
  ACCESS_ADMIN_USERS: "Manage Users"

  # User account form labels (fallbacks for PLUGIN_ADMIN.* keys)
  ACCOUNT: "Account"
  USERNAME: "Username"
  EMAIL: "Email"
  EMAIL_VALIDATION_MESSAGE: "Must be a valid email address"
  PASSWORD: "Password"
  PASSWORD_VALIDATION_MESSAGE: "Password must match the configured pattern"
  FULL_NAME: "Full Name"
  TITLE: "Title"
  LANGUAGE: "Language"
  LANGUAGE_HELP: "Set the language for this user"
  CONTENT_EDITOR: "Content Editor"
  CONTENT_EDITOR_HELP: "Override the content editor for this user"
  2FA_TITLE: "2-Factor Authentication"
  2FA_ENABLED: "2FA Enabled"
  2FA_SECRET: "2FA Secret"
  2FA_SECRET_HELP: "Scan the QR code with your Authenticator app"
  YUBIKEY_ID: "YubiKey ID"
  YUBIKEY_HELP: "Insert your YubiKey and click to generate an OTP. The first 12 chars are your client ID."
  YES: "Yes"
  NO: "No"
  PERMISSIONS: "Permissions"
  GROUPS: "Groups"
  GROUPS_HELP: "Assign user to groups for permission inheritance"
  ACCESS_LEVELS: "Access Levels"
  AVATAR_HASH: "Enter a unique identifier for your multiavatar"