also I'm not really happy with a blanket except here ... not sure how else to catch all the various dependency exceptions that could happen while trying to add or remove the user from the group.