Watch for group changes.

If group changes, we have to remove everyone from old group, and add
everyone from new group. Otherwise datastores might get wrong data.

Change-Id: I6cc2c55d5622db66053ed06789c95ecec2b71b14