There is a potential bug or not but is the plugin designed that the moderators can create new kits without permission kits.admin?

If not then the moderators auth lvl 1 can create kits without permission kits.admin