Don't return expired user groups in UserRightsProxy