Fixup on top of commit:3682fde3: we should not "assign a number of groups, fresh, unreserved group IDs" because then these groups would have a different GID than in Tails 3.8, which is precisely what we're trying to avoid here :)