Because it's annoying to write "Authorization::Maintenance::without_access_control" in every data changing migration, I put the following code into an initializer. Perhaps you can add it into the plugin:

module ActiveRecord
  class Migrator
    class << self
      alias_method :original_migrate, :migrate
    end
    
    def self.migrate(*args)
      Authorization::Maintenance::without_access_control do
        self.original_migrate(*args)
      end
    end
  end
end