I can attest that I have seen him grilling other players for the command, both on his server and others.
You took the correct course of action by De-Admining & Banning him, I would suggest that you avoid giving players admin unless you absolutely trust them.
Also regularly change your admin password to prevent users form gaining access to it.