also add foreman-proxy to ssl-cert
and foreman user itself too
setting correct IDs for membership group states
improving check of group membership