I have a SharePoint group named "Secure Site" created and have placed an Active Directory Security Group inside. I go to the list where I have links as a menu and enter in the Secure Site into the Target Audience field. When a user views the page that has no permissions to view the menu link, the menu link appears. The user is not in the Active Directory Security Group, but the link is available and visible. What I am doing wrong?