nuked hokey user/group association handling methods and dropped in slightly better replacements.