internal: when adding user, also create corresponding group. this is required by init script