Implement permissions. By default, only ops and singleplayer players with cheats should be able to noclip.
(This isn't something I care about in particular, but is something you've said you wanted to implement so I figured I should document it here.)