This alters the group option to more closely mimic @natewalck's omnibus profile creation chef cookbook.

As I didn't get a lot of feedback on the first revision (not that I publicized it much outside of the #security channel in Slack), I'm making a separate tag for this release.

Under-tested, and could be overridden by customers (uses 'Set-Once' frequency, which allows settings to only be re-applied with the frequency of every login session.