By using the userid override, I can make anyone have any rank image I like. My access-test account never has AdminCP access, yet has the same Webmaster image as I do, because there is no Webmaster usergroup; this badge is assigned by ID.
That was my second guess. My first was that you banned him for like 10 minutes as a joke.