dsdb: Audit group membership changes