helper types
integrity policy on groups
filter out groups with labels

TODO: provide a flow-sensitive interface to allow chaning group
membership to change.
groups and posts are labeled by group-ids
edit users