Add ACL scheme for checking that user belongs to nss group

* Add documentation for *unxgrp* ACL scheme
* Add *unxgrp* in supported ACL scheme in usage message
* Add test suite for *unxgrp*