Spend ms_userpoints Permission

Gateway for userpoints does not have any permission associated with it, so it shows up for all users.

Uploaded code adds a "Spend Userpoints" permission which appears to be effective.