Why users removed from a group still have their privileges?