workaround to inconsistent 'getent group' behaviour