A foreign key between the auth source and group should be added too.