akeeba/skeletonkey ? reverse-engineered prompt

Build me a Joomla plugin that lets a super user log in as another user for troubleshooting.

I want it to work on Joomla 5.4 and newer, with PHP 8.1 or later. The idea is that an administrator can quickly switch into a normal user account to check things like menu access, module visibility, or issues with things like coupon codes and other account specific behavior.

Please make it secure. Only certain administrator groups should be allowed to use it, and only certain target user groups should be eligible to impersonate. By default, regular registered users should be allowed, but administrator and super user accounts should be blocked, with those group settings configurable in the plugin.

Use a secure one time login flow with a short expiry and HTTP only cookies so it is not easy to abuse. Make the plugin feel like a clean Joomla extension, with sensible settings in the admin area and straightforward handling for logging in as another user. If you need to check current Joomla docs while building it, go ahead and look them up.