xlint: allow <account>_groups