In which two vsphere.local groups should an administrator avoid adding members? (Choose two.)