What determines whether a GMK needs to be updated when a user is removed from a group?
The GMK's Activation Time
The security profile of the group
The GMK's Server URI
The user profile update from the CMS
The GMK's key parameters