tweak: disable access to group by default, close #129