security.AdminUser - allow to pass in custom groups