Non-admins able to change server cvars?

[Hyperion]

How come my sub-admin ranks can suddenly change server sbox cvars, such as godmode, noclip, pvp, etc.? My ranks go as:
user - respected - moderator - operator - admin - superadmin
User, respected and superadmin can target: *, others: !%<higher rank>
My moderators can change these cvars, while respected can't. What am I doing wrong? And is there any documentation for the Can Target: option? I wait to have it correctly ordered, but seems like it's wrong

[Avoid]

Hello,
The permission for the gamemode settings can be found here: XGUI -> xgui_gmsettings
FAQ for can_target: here

Cheers,
Avoid