When I tried doing !@* as you suggested, it does not re-op the deopped nick if they have a certain user level/hostmask. I guess this makes sense that it wouldn't but if the user is "protected" it should still re-op that user regardless of who did it.
