Database upgrades can be triggered by unauthenticated user

The issue occurs when adding an additional plugin to the site.

As a non logged in user you can go to the path sitename.com/admin and you will be taken to the plugin screen, you can then proceed and complete the installation before being taken to the login page.

This also occurs when the site is placed in maintenance mode via the Moodle interface.