fixup the DroxPerms implementation. it has rudimentary group support.