Split membership requirments out for a simpler auth system.