The group an authenticated user belongs to is not filled in the X-Authenticated-Groups in ICAP, or cs-auth-group in Access Log