radusergroup needs a primary key too, else PgSQL (rightly) refuses to work with it