Otherwise adding to `groups` will cause validation (in EE)  based on
`group` to fail.

This is consistent with how Clusters::Cluster#first_project. The
alternative is to switch validation to use `groups` as well.