Minor followup to r68156, add "user" as implicit group