During a prototype build, we wanted to rename the confluence-admin and confluence-user groups but couldn't. So, we built new groups, assigned them, and deleted the originals. Bad idea. We didn't know that these groups were germain to the environment and it appeared that permissions got corrupt after that, forcing a rebuild. If these groups shouldn't be deleted, they should not be delete-able.