This happens consistently when I upgrade from 0.27 to 0.28.1. I've tried clearing out the Global Security section and starting again, and it doesn't make a difference. Going back to the previous github-oauth.jpi and restarting fixes the problem immediately.
I'm using Matrix based security, four groups with different access levels.
I think the key lines from the stack trace are: