Use auth.groups for group_owned_models