groups: move code to kernel/groups.c