> * Add group object ownership, so groups can rename/drop/grant on objects,
>   so we can implement roles