Remove departed students from campus access groups before audits

Your student enrollment updates arrive with non-current statuses, causing orphaned access and license drift. IT regains correct group membership before the next access audit.