groupserv: allow group inheritance to work for a single level (using a recursion guard).