hardening: wheel group: prevent users from adding themselves to wheel