MDL-64395 groups: Added XSS Risk to the manage groups capability