- Expose filtered `prisma` client to plugins excluding core database tables - Let core plugins to request core database tables explicitly if they need access (users and settings plugin require this) - Log plugin database access logs