- also handle primary group of user when checking permissions (see gh#openSUSE/snapper#100)