fix(plugin-security): count and warn the derived capability skip that leaves the platform bucket unseeded

fix(plugin-security): count and warn the derived capability skip that leaves the platform bucket unseeded #4439