Guards around Teams handling

When a team is specified in entitlements we should check to see if it exists, and if it doesn't exist we should use the `/orgs/{org}/teams` endpoint to create the team first and then populate it with the targeted users. 