By hooking into the admin you also miss event logging when people do write migrations or move users to groups elsewhere. I'd investigate a django signal on the `GroupUser` model. How did this use to work, by the way? I didn't dig deep enough to see what broke this.