* Use correct mount accessor when refreshing external group memberships * Add CL * Handle the renew case properly