provisoiners/docker: only add user to group if not in it [GH-2838]