Use user's primary GID instead of getgrnam()