Fixes DE240: bugfix: stale keys cannot be detected

don't reinitialize `node['dsh']['groups'][new_resource.name]` every time.  this breaks the code that detects stale pubkeys.