Explicitly added libnss-role: we are rely on this now for user groups. Alterator-roles-common contains default 'users' role.