Looks like the plugin has no permissions to restrict the access, all backend user can access settings. You should define at least one permission Manage settings.
Update: in the GitHub repository the permissions have been merged in Dec/2016, however, the latest version was published in the October in Nov/2016. Please push the GitHub latest into the October.
Last updated