`getent initgroups $LS_USER` feels like the more correct approach here, do you agree?
Parsing /etc/group isn't best because it doesn't respect nsswitch.conf.

Thoughts?