Per-world exclusion

groups:
  student:
    permissions:
#   So here, I give them global permissions, to use in all worlds
#   group.student is a worldguard thing.
    - group.student
    - worldedit.*
    - commandbook.gamemode.change
    - commandbook.call
    - commandbook.spawn
    worlds:
      hub:
        permissions:
#       And here, I take away the admin-build permissions. "hub" and "showcase"
#       would be the "safe" worlds that students wouldn't be able to build on
        - -worldedit.*
        - -commandbook.gamemode.change.*
      showcase:
        permissions:
#       more permission removal
        - -worldedit.*
        - -commandbook.gamemode.change.*
  admins:
    permissions:
#   I don't know the "everything" permission node, so bleh
    - permission.everythingElse
    - -bukkit.command.restart
    - -bukkit.command.stop