Correction: allow user delete/edit anywhere, disallow delete of group 1/KeyMaster