LocalMachine: Fix "require group membership" knob

Require membership in *one* of the specified groups, instead of denying
access if the user is not a member of *all* specified groups.
RADIUS plugin: Support multiple servers

Allow the user to specify a space-separated list of RADIUS servers.  The
"Retry" setting now specifies the number of connection retries per server.