Etags for credentials

As a secondary table of the UserGroup table, any change that changes credentials should touch the etag.