Add the option to mark the group as required when adding to a permissions list.
This will allow for a logical 'AND' operation to better secure content.

For example, a group for 'HIPAA CERTIFIED USERS' is added as required to a variety of lists that have medically sensitive content. Removing the user from the list removes any access to the content regardless of other permissions to the list.