cred: groupmember() and co.: Sanity check cred's groups (INVARIANTS)

Leverage the normalization check functions introduced in the previous
commit in all public-facing groups search functions to catch programming
errors early.

Approved by: markj (mentor)
MFC after: 3 days