Does K2.net support having a process group permission using groups that contain other groups?

For instance, say I have the following AD structure:
Group1 contains User1
Group2 contains User2
Group3 contains Group1 and Group2

Should I be able to specify Group3 as having start permissions and expect User1 and User2 to both to be able to start a process? Or are groups within groups not "traversed" and all users must be in the top level group?

As you might have guessed we are trying to do this and it doesn't seem to work. We always get an error back stating User1 doesn't have permissions to start the process. If instead of specifying Group3, we specify Group1 and Group2 or the actual users themselves, then there are no issues.