The client has a ERP program that provides a "locationCode" for each
user and this is set in the vault.

When then we add the user to the determined container in the File and
Print tree through an Edir-to-Edir driver, they then want the user added
to an arbitrary list of groups based on the dest-dn.

When the user's "locationCode" changes, we then need to:
- remove them from the current container's list of groups
- Move the user
- Add them to the dest-container's arbitrary list of groups.

We are looking for ideas on how this might be done.