ensure user/group present