simplify group lockdown
simplify group lockdown

ultimately there should be a wristband group in ldap rather than configuring
the allowed groups in wristband config, this is the first step towards that

hmrc/wristband