set-default-roles should not kick in always...

should only do its thing when called from someone creating a new wild
repo, and not just changing its perms.  (Because, don't forget, the
POST_CREATE trigger list is invoked from perms also).
'info' should show wild patterns hiding in groups also

(thanks to Sebastian Koslowski for catching this)