group_is_permitted
krb5_boolean group_is_permitted(groupstate *gstate, int32_t group);
if (!group_is_permitted(gstate, ch->group))
if (!group_is_permitted(gstate, ch->group)) {
if (group_is_permitted(gstate, support->groups[i]))