nested group memberships (grp->mem) unique