REST API - not possible to remove someone from private group unless you are also in this group

Description:

I use the REST API to create new user, bringing them in the correct channel, disable them, delete them. All seems to work fine.
To invite a user into a private group where you (the admin) are not a member you need the permission "Add User to Any Private Channel" That works great and helps a lot! - Thanks for that!

But... you can not kick that user anymore. - unless you join that private group with the admin you are using.

Steps to reproduce:

1. Add someone using the REST API (needs "Add User to Any Private Channel" Permission) to a private Channel where you are not a member

curl -H "X-Auth-Token: 9HqLlyZOugoStsXCUfD_0YdwnNnunAJF8V47U3QHXSq" \
-H "X-User-Id: aobEdbYhXfu5hkeqG" \
-H "Content-type: application/json" \
http://localhost:3000/api/v1/groups.invite \
-d '{ "roomId": "ByehQjC44FwMeiLbX", "userId": "nSYqWzZ4GsKTX4dyK" }'

2. Now try to remove the user again

curl -H "X-Auth-Token: 9HqLlyZOugoStsXCUfD_0YdwnNnunAJF8V47U3QHXSq" \
-H "X-User-Id: aobEdbYhXfu5hkeqG" \
-H "Content-type: application/json" \
http://localhost:3000/api/v1/groups.kick \
-d '{ "roomId": "ByehQjC44FwMeiLbX", "userId": "nSYqWzZ4GsKTX4dyK" }'

3. See Error Code 400 Bad request

4. Now join this private group with the callee admin and send the same command from 2. again

5. See success:true

Expected behavior:

It should be possible to kick someone from a private channel if you are an admin using the API

Actual behavior:

It is a one way ticket. If the user is in that channel you can not kick him anymore.

Server Setup Information:

• Version of Rocket.Chat Server: 3.17.0
• Operating System: Ubuntu 18.4.5 LTS
• Deployment Method: tar
• Number of Running Instances: 1
• NodeJS Version: 12.19.0
• MongoDB Version: 4.0.26

Start by tracing the REST handlers for groups.invite and groups.kick, then inspect how the "Add User to Any Private Channel" permission is applied when the administrator is not a member. Reproduce the reported sequence and verify that an authorized administrator can remove the invited user without joining the private channel.