Feature/set supplementary groups

By default, the puppetboard user is unable to read private keys from /var/lib/puppet/ssl. One way to fix this is to add the puppetboard user to the puppet group.

This patch adds the capability to set the supplementary group(s) for the puppetboard user.