now, if googlegroupB is deleted and someone (malicious attacker or otherwise) re-registers it, they'd have admin access to widgetC