Memberships: better filter + mark as eligible on reception
Generating a root keyblock through gen-root command