use /goal with bypass permission then