Timed deletion (post expiration) as an option for the group would give affordance for some level of “post compromise” security, yes? #skipthemoon
I at least think key shares should expire, which would achieve this