>Right.  Aside from the persistent data file servers, like kfs,
>kenfs, and fossil (as Erik mentioned), there's not much that
>treats groups in the expected way.

So if you'll continue to pardon my asking, who exactly tells a given
file server what constitutes a user or a group?  In this particular
instance, I'm running fossil (without Venti) as the filesystem.  So
then, doesn't /adm/users come from fossil?  Wouldn't that mean that
it's fossil's responsibility to enforce permissions?