Treat security users and groups as distinct concepts with separate cluster metadata storage.