create default system group and allow override in config