We probably can't change this from a frozenset/set as there's other code that relies on it already (being able to do things like user['groups'].intersection(OTHER_GROUP_SET) )