Attempt to fix groups staying/not-added by re-checking all active.

If groups get changed or expiration checks were triggered, all active
premdefs get checked for "enter" once more, in order to prevent groups
not getting added for more complex setups.