(owner has all privileges)
s mar	(member privileges)
SOMA	(world privileges [of course, this includes members])

Default for a group is S-M--
Default for a user is S----

flag	AFS queries				pts commands

s	ListEntry				examine
o	ListOwned				listowned
m	GetCPS, ListElements, IsAMemberOf	membership
a	AddToGroup				adduser
r	RemoveFromGroup				removeuser