if re-setting both user and group, do the group first

only root may change either their user or group. so after dropping root
perms, we can't drop group perms. *smack*
accept user and group in featherctl, and pass it on down