use setgroups too