Fix: after dropping privileges (main process), the new identity is granted all the group rights it belongs to and not just its own group