unless node['sys']['pam']['group'].empty? # ~FC023 Do not break conventions in sys
  template '/etc/security/group.conf' do
    source 'etc_security_group.conf.erb'
    owner 'root'
    group 'root'