Automatically map email domains to groups / permission sets?

Looks like it only adds on signup (unless you check the box), and doesn’t remove anyone.