check_snl: re-implement groupmembers check