add permissions to plugin.yml, so operators get "hoarder.admin", and normal players get "hoarder.gui", so no permissions plugin is technically necessary (although obviously advised)