Add group ACL rule for membership in another group

This will make it possible to configure different API key requirements for different alliances.