Groups have two kinds of ID - the one auto-generated by h and optionally
the one supplied by the authority that created the group. The service
config can specify which groups to show using either kind.