groups: make superuser have access to everything