readme: document user/group