This commits implements "extended group lists" feature which
allows secondary group list to be longer than 16 by not trusting grplist in AUTH_SYS creds