Permissions

Players get snbattlepass.use by default. Every admin node defaults to op. The two pass nodes default to false, so nobody holds a pass by accident.

Passes granted by permission

snbattlepass.pass.gold and snbattlepass.pass.diamond grant a pass dynamically, for exactly as long as the player holds the node. Nothing is written to the database, so removing the permission removes the benefit immediately and cleanly.

That makes these nodes the right way to attach a pass to a rank or a subscription: when the rank goes, the pass goes with it, and the player keeps any reward they already claimed.