We currently don't specify what permissions servers should grant to _everyone and _users with no extra configuration, and what they should never grant to _everyone regardless.
For example, _everyone should never be allowed to sendMessages.
(CC @towerofnix as this may or may not be implemented in @decent/server?)