This reduces chances of errors where consumers of strings mutate inputs and reduces memory usage of the app. Test suite passes now, but there may be some stuff left, so we will run a few sites on a branch prior to merging
Previous attempt at 70adb940 missed the critical "everyone" group from staff, leading to a case where staff was no longer able to create categories