lists for *_FLAGS_BY_GROUP requires django-auth-ldap >= 1.1.5