Should shares be removed when a user leaves the group?

[michielbdejong]

This is something that came up in today's token-based access discussion. But the way we implemented federated groups, you can share with a group without being a member of it.