yay code separation! And ditched the "master share" concept: will enumerate current user groups.