s for each USERNAME or, if no USERNAME is specified, for
the current process (which may differ if the groups database has changed).