Programmatic Access to User-Defined Groups and Membership Management in Cato