view-access: display comment when no groups match
also match posixGroups