Nice trick to add another group, but:
```puppet
User ['cinder'] {
  groups +> 'cephkeyring'
}
```