When adding or removing groups on a user object, the merged permissions cache should be cleared.