I have a secondary user group called "supporter" and set the ads user criteria to only show ads to users not in this group. But they still show up? They have primary user group of "Registered" . Does the primary permission override the secondary group permissions?