That's right. Like in Midas, users can't be added a group without their explicit consent, under normal circumstances. We borrowed this paradigm from social networks such as Facebook, where users must be invited to a group by members of the group rather than just being added without their permission. I guess we never really had a philosophical discussion about whether that's better than the alternative, what do you think?