Global Sysops? (Who are also interface admins)
Topic on Talk:Wikimedia Security Team/Password strengthening 2019
I think they will get caught automatically by the "has editsitejs
" check, but yes, good point.
I imagine this will use wfGetPrivilegedGroups which includes a bunch of other things. The full list is bureaucrats, checkusers, interface editors, sysops (ie. regular admins), oversighters, interface admins, botadmins, eliminators, engineers, templateeditors, a bunch of global groups (abuse filter helpers, founder (Jimmy), global interface editors, global sysops, new wiki importers, ombudsmen, staff, stewards, sysadmins), edit filter managers on enwiki, a bunch of groups on metawiki (centralnotice admins, global renamers, WMF Office IT, WMF Support and Safety), wikidata-staff, plus all users on private and fishbowl wikis.