Short circuit membership valiation without groups to check

Default to true since no groups to validate against translates to
existing handling: if no groups to check against, then they are valid
members.