How nesting public groups affects sharing rule evaluation and performance, and when deeply nested groups become an architectural risk.