e4852090aa
An incident expires a whole group at once, which is the worst time to repeat the same authorization read per row. Bounded concurrency caps one tenant's share.