add sftponly to groups