Draft: pmaports.cfg: add install_user_groups -> user won't be in "input" group by default

Set install_user_groups with the same groups as we currently have as default except for "input" to tighten security.

Fix pmbootstrap#2257