follow openssh way of handling root group