See "libnm-util: simplify permissions somewhat; remove groups" for more rationale. Might come back later.