This regex doesn't work for my example which contains `-`. I assume `-` will be quite common but not sure what the full range of valid characters are for this in the Cisco configs.

I used: `group_string.scan(/'([\w-]+)'/)`. What happens if no groups are found? Will authentication work against the default group or should the module exit? Should the user be able to manually specify the groups?