Hey. Also with respect to having this documented in the release note, you may want to have a look at my comment:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1065806#47 I.e. I think it might be usefull to not just indicate that/how people may use "nousergroups" again, but also to refer to alternatives (like setting a per-user default UMASK via GECOS) by referring to the pam_umask(8) manpage. Cheers, Chris.