I got a chance to try it out now that there's been a lenny fix, and it didn't seem to work. Wouldn't putting "${user_default_groups}" in the script just excecute the group list as a command? I think that line should begin with "set" like the others, but I don't know the exact line to use.