No longer need to track group; let filesystem set-gid and acls do what's appropriate