feature: group assertion type

much simpler than the other. Asserts a group exists. only works on linux for now.

```
ok group admin
```