More secure implementation of vlk_restrictgroup_creating