always inject privgroups for the groups argo uses internally.