filter out groups with labels

TODO: provide a flow-sensitive interface to allow chaning group
membership to change.