rule3 {
    if {
      has-true="<group.default> & <group.wkmember>"
    }
    take = [
      "group.default"
    ]
    give = [
      "group.member"
    ]
    set-primary-group="member"
  }