corrected HOT_PERMITTED_GROUPS options