Should a `GroupMembership` be valid if it doesn't have a `user` and a `group`?