How many users are affected by enforcing auth membership limits?