As an idea make a permission that or setting that if the player is given the permission they can't do anything

That would be a complete 180 on the current design, this plugin is more meant to first verify a player before they can do anything.
It's best to keep the permission system as small as possible, as this would add yet another 60 permissions, another check per hook and increased code-spaghettyness.

Perhaps the best solution for your case would be to grant everyone the bypass permission via the default group and create a special group for the bad-actor group that doesn't have the bypass permission and doesn't inherit from default? Not 100% certain if this will work, but it's worth a shot.

thanks that is prob what i will do