I configured the tcl to accept commands to start and stop, only to masters / operators, but today it was reported that some users are able to start and stop the game, like Operator.
I honestly doubt it's something on the bind side, so, are you sure that the users that where able to start/stop the game don't have the global or local master flag? Or maybe their host matches a known user or something? Check that out.
Once the game is over, the king and the pawn go back in the same box.