Two things killed off the adoption of groups as a widely-deployed ACL mechanism: 1) NFS, specifically its limits on the number of supplimentary groups the protocol supported, 2) Kernel limits on the number of supplimentary groups associated with a process (e.g. NGROUPS_MAX) --lyndon