make sure default RADIUS groups don't override ones for existing records