Major update: group auth for trac now comes from DB via mod_wsgi group auth handler. Config moved to global.