Prevent updating group membership via script. Currently PMC for Mac controls updating group membership over command-line only. However if the same command is executed from script, it cannot control. A support case # CS0906175 had already been raised for this issue earlier. This is a high risk as users could bypass PMC controls to elevate themselves as local administrator.