groupserv/flags: ensure that GA_FOUNDER is required to set +F or -F on an access list entry. (closes #244)