Reversed prior change that collapsed getGroups and getGroupsPure. Turns out we need the separation after all.
Change bPermissions getGroupsPure() so that it does not include the group default in its list.