After the following work is done, make sure it has been documented in the extensions migration guide so that an extension can use the new permission to read from existing system indexes from its previous incarnation as a plugin.

• [Feature] Update SecurityIndexAccessEvaluator to support new index permission #2553