the main usergroup always override the secondary. ... if you disable some right on the secondary, just disable it on the main one or the main one will enable it by default... this is just logic - we can't do a thing against that..
it depend... if your script call only the main usergroup, that is causing the problem... second usergroups are usually for enabling disabled features from the main group..