make groups setting optional in users.sls template