Groups now reject external members when their settings don't allow them