avoid shadowing in auth.ldap.groups()