Switch from imputed (virtual_groups) login logic to explicit (full_login?) logic