Signature and encryption are separated. You still sign all your events. But use a group cipher key, which is different from group identity key, to encrypt. But rotating this cipher key, you can kick out people. Not implemented yet.