Only set group for "runuser" if "rungroup" is not specified.