This fixes people unknowingly changing the primary group rather than adding a secondary group. * Add integration test