How do you whitelist groups for sharing? I see the exclude option. Is there a way to whitelist? Even with the exclude option, can I manage that from the occ command? Is there an API for it? One issue with the exclude option is that if I throw users into it, they will be in a group with other users form other orgs.