I highly believe that there should be a permission node for spectator mode, I have had situations where I am comfortable with giving someone access to /gamemode, but not spectator mode as they can go through walls, floors, anything!
The permission node should be core.changegm.spectator, however to be more tradition, you should change the core.changegm permission node to core.gamemode as it is more understandable.