s3-auth Use correct RID for domain guests primary group