Automatically create group when enabling ACL

Fixes #505

Signed-off-by: Michal Čihař <michal@cihar.com>