auth: test for multiple groups required