Add early warning when using -g with service accounts for "acl ch" rather than -u to give a useful error message.