i would prefer firejail over using groups etc.