so in the above example, as soon as the user is no longer a district admin (or the district is removed), they'd lose access