We check for manage_options for the admin screen, but install_plugins for the actual action of running the switching. Perhaps make install_plugins the requirement to even see the admin screen? Original issue: https://wordpress.org/support/topic/does-not-respect-capabilities-canyou-please-fix-asap/#post-12748575