clarify OMERO groups for LDAP-using sysadmins

Make it clearer to sysadmins that OMERO groups are not necessarily LDAP groups.