Should this be prevented by setting target_integrity = True on the [UserToGroup](https://github.com/Pylons/substanced/blob/master/substanced/interfaces.py#L760-761) ReferenceType?