Groups now contain the concept of Applicants - users who have applied to join the group, but require approval by a Group Manager. A new privilege allows sub-sets of Groups to be owned by other Groups. This allows group management to be delegated hierarchically.
