Support for optional keychain groups. Not guaranteed to work yet.