trying to debug group membership lookup