Permission source adapters are naive about group source adapters, so they cannot
remove groups which are granted certain permissions when such groups are removed
from their own source adapters.

I need to make permissions source adapters know about the group source adapters
being used, so this can work as expected.

(Reported privately by Jonás Melián).