attestation should not send "groups that require attestation" email for groups with no members

I have found that if a composite group has no effective members you will still be notified about the composite even if there is no effective members.

I think it makes sense to exclude groups that have no effective members.