Rather than specify group, let puppet

Puppet does 'the right thing' if you specify the group as None and then
rely on it to look up the group for that user.