Maybe split into "admin-ish" and "non-admin" groups? The latter group stays with the current permissions (eg post without moderation). If you want to give specific privs to someone, tick a single box "give admin permissions" which you can then edit more finely on another page, which *only* addresses admin privs? The first tick should just sort the new-admin into the admin category, not suddenly give them all the privs.