Allow groups to be specified as absent, and document postgresql::user