> When a user is updated the access may be modified

Can you give an example?

> Due to the limitations for cid matching on clearing caches

Explain? invalidation the entire cache whenever a user is saved sounds quite harsh.