In my experience, the group cache only bites you if you rename global groups in your domain, in which case you have to flush the cache (think the default is every 30 days) ... other than that - the group cache has been a HUGE boon in our environment - we control absolutely everything about the user using global groups ... our users have literally dozens and dozens of group memberships. Without the group cache, think we would suffering greatly - idk.