Plug a hypothetical use after free in sysctl kern.proc.groups.

MFC after:	1 week