Changing groups that can change 'bag' rights

No longer allowing sysops to add bag rights, but allowing bureaucrats to both add and remove them