Otherwise adding to `groups` will cause validation based on `group` to
fail.

This is consistent with how Clusters::Cluster#first_project. The
alternative is to switch validation to use `groups` as well.