At last – properly indented group permissions courtesy of @onli. Yay.