Remove these permission nodes from your Default group (if they're there):
bending.water.bloodbending (gives permission to the subelement bloodbending)
bending.ability.bloodbending (gives permission to the ability bloodbending)
bending.ability.bloodpuppet (gives permission to the ability bloodpuppet)
Add the same permission nodes back, but this time put a hyphen/dash in front of them.
Example: -bending.ability.bloodbending, etc.
This will negate the permission from that group if the permission is default.