setPrimaryGroup() can now demote users too.