netapi: add NetUserGetGroups to public headers.