I think your problem is you have modifyworld.* before the exclusions. If you place it after, I think then it'll work as expected. From my brief using of it (we just swapped to PEX) I've found that it seems to go in order on looking for permissions. Course I may be wrong since I'm having issues getting philospher stone to disable for the beginning groups in our server, but reenabled for the later groups.