I deduced that much on my own. I guess I should have put the emphasis on the word "commandline".

Still, the notion of modifying every users' profile every time a group name changes...

The problem is that often the person renaming the groups is not the same person charged with maintaining the scripts.

I see often where people use the -F without the fixed date, effectively flushing the cache on EVERY logon. What I propose is a compromise where the cache could be flushed more frequently than once every 30 days without having to constantly update the CL switch or do date math and deleting the key. Maybe another SetOption as well for the built-in option.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.