filter against passed groups (which may be already filtered to exclude inactive