POSIXUsers: allow better <MemberOf group="foo"/> syntax
fixed unit tests