Comment 5 for bug 1187750

It may also be a good idea not to actually add all those groups to the system group list, but instead use something like libnss-extrausers in the nss stack to have a cleanly separate list of groups that's simply stacked on top of the system's by nss.