reencryption: take into account groups

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>