Add more fine-grained control over granted group rights. * `rtxmlrpc` specifically for the socket * `rtdata` as the runtime group (and thus for written data), via `sg`