make sure that pesign drop all supplementary group when started

Since the daemon only use the setuid/setgid for avoiding running
as root, making sure we have relinquished the supplementary group
should be enough.