Protect reload plugin command with allow remote admin option

fd03350b9ea8af3cdf65fb8fb2367e333b252de4 introduced a new option
to disable remote plugin administration.

Require reloading plugins to be explicitly allowed with:

  plugins.allowRemoteAdmin = true

Change-Id: I2946202dd40af8b4197212fb15a488b166883d8a