Prevent groups from getting "approveacls"
Enforce group to end with "-sig" and rewrite logic for pkg_change_poc
Pass a real (fake) user to the test