Propagate --as-role and --as-group to policy loading BC#92493499-high-bug
assume that the member added-to/removed-from a group is a user