groupserv/fflags: add last founder check (closes #352)