Here's my situation:
I have a container policy on for creating student home directories. This works great.
I now have a few new classes which require the students taking them to have additional personal space on a "secure" server. This cannot take the place of their current home directory, but needs to behave like their home directory. The users are identified by belonging to a specific group.

How do I setup the appropriate NSM policy to provision this personal space when they become a member of the group, and deprovision it when they are no longer a member?