I just want to provide some information.

The aclcheck /g1 does not seem to work.

I wanted BM to update cache each time there was a change in NDS group
memberships on the fly. This did not work.

Unless this thing is designed to do something completely different and I
have misread the doco it is fairly useless as I cannot recall this
working in previous versions either.