Limited privilege escalation during call to reset() (possible via script
console but not UI).
[RM-1645] Trying to avoid excessive computation (and lock contention) by
keeping Group.membership longer.
Fixed a theoretical NPE from a reconfigured agent.