You can disable the permission nodes one by one using your permission plugin. The ability nodes are bending.ability.ABILITYNAME, replacing ABILITYNAME with the name of the ability, i.e. FireBlast or WaterManipulation.
Once you negate them for your default group, you can grant it out to individual users if you want.