Unable to update kubernetes token groups

[marcinc]

it's impossible to add/remove other token groups manually when user have active escalated privilege. This is due to the fact that privileged groups aren't allowed when updating manually but I suspect form still pushes those when submitted.