Consider primary groups when reading group members

I'm not sure what the "normal" case is, but at best it's inconsistent.  For instance, `adduser` doesn't include new users as secondary group members.

Would having duplicates in the uid list actually matter?  I'm not seeing where it would make a difference.