In Multi-tenant, I should not be able to set permissions for "members" par defaut.

Looking at https://github.com/nuxeo/nuxeo-multi-tenant/blob/master/src/main/resources/OSGI-INF/multi-tenant-contrib.xml

"members" is in the prohibited group, but if not other permissions is already set, I can set a permission for members anyway.

"members" is correctly filtered if another local acl is set.