auth: consistent handling of well-known alias as primary gid