Upstart should be able to (optionally?) assign supplementary groups to user job processes. When running user jobs, upstart SETGIDs them to a primary group only, therefore crippling the user's ability to run jobs requiring group-specific privileges (for example, reading from audio device or webcam,…