Secure groups for Kodi.

Don't grant the groups globally, instead grant specific services
specific groups as needed.