Hello,
I've realized that IS.php says CUs are able to grant&revoke user and autoconfirmed. Each of this group is "granted" (better, evaluated) automatically by MW and nobody can do anything with this. I think those directives should be removed as dummy ones.
Best,
Martin