Groups also need auth