Enterprise resources

And for the behavior below, if you specify `members [ 'a' ]; invites [ 'b' ]` and 'a' and 'b' are both *members* already, we don't want to remove their membership either.