addresses dep cycle issue by removing group-user-exec conflict, rewrote as single exec using groupadd && gpasswd