respect list of group memberships required for login