Add superuser check to group_is_public and test coverage