linux: include grp.h for setgroups()