Function epl_get_allowed_request_actions

Actions that may be triggered by the epl_action / epl-action request parameter.

Only these actions are dispatched. Every other epl_* hook is internal and must never be reachable from a URL or form, as it would be called with the raw request as its arguments. Actions are only dispatched for logged in users. Each allowed handler is still responsible for its own capability and nonce checks.