As a server admin,
I want the plugin to automatically migrate my existing claims and configuration to the new version 20 format with no unexpected elevated permissions
So that I can upgrade without having to worry about protected claims being less protected

This will contain a list of things we need to build into our migration feature.

permissiontrust

I think we should also consider dropping all existing permissiontrust so as to not require manual admin intervention. Back when I ran a server we had people build shopping districts absolutely loaded with /permissiontrust + /accesstrust combinations so that shop owners could allow other people they trusted to restock their shops for them. I can only imagine what a nightmare cleaning that up would be if people unexpectedly obtained higher levels of trust.

Alternately (to avoid a database/data format update), when loading claim permissions, only keep Manage if they have either only manage or manage+build.

Originally posted by @Jikoo in #2507 (comment)