This module implements a very thin layer around the getgroups(2) and
setgroups(2) syscalls.