move bulk_send action to bulk_operations permission, refs #4291