Check both superperms and PEX directly to support older versions of PEX with inGroup

Older versions didn't set the group nodes correctly, so they were only
accessible through getEffectivePermissions()