I understand what you are saying about “best practices”. However, I find many times capabilities are shared over several plugins.
The revoked capabilities from the ‘BBTC Admin’ role are actually what I am trying to grant permission to. I grant the permissions, save, test, and when the client logs in they are gone.