ckeditor_mentions-8.x-2.x-dev/ckeditor_mentions.permissions.yml

'use inline mentions':
  title: User can access other user Real Names for @mentions (protects AJAX callback path)