I think that check_group should only check the group of the file if
the file is group-writable. Currently (4.14) check_group is enabled by
default if modemask allows group-writable files, which makes sense,
but if the actual file in question is not group-writable, it wouldn't seem
to matter.
Ken