fixed a bug where afs.operators could potentially remove their own permissions with the reset argument