Permission checking has been updated to allow the universal star permission in plugins like PermissionsEx and LuckPerms to work as intended.
Built-in negative permissions have been removed. It turns out that I didn't need to implement them at all. if you want to negate a permission, use whatever method your permission plugin requires.