Don't ensure=>absent dab's group

Even if he's disabled, he's still present on some systems.  That
means his group has to exist as well.

Change-Id: I211e609de1cf48452f142935355aa7dbb180a78c