Made it so ops aren't by default exempt from the check. They'd explicitly need the bpds.exempt permission unless you have config.ops-exempt true in the config. In game you can now do /bpds opexempt to toggle that config setting.