Now you can grant bounded access to your console, for example, you can create mod group and grant it such commands as
mute, kick, ban, unban, etc...

but, specifying the command kick, you also give permission for command kickall and so on;
To avoid possible abuse from possibly incompetent staff member there also is blocked section.
There you put exclusions from section commands. (if you do not want to restrict any acces, you can put there any command which can't be executed via console, such as some world edit commands)

In current version only unic user_ids can be specified in ids section, in upcoming updates it will be expanded to accept @usernames - stay tuned)