I have one small nit-pick.

Can we use sys-users and sys-groups for the category names for the user
and group packages?

I guess the only argument I can give is users and groups are system
level things like other categories that start with sys-, so it feels
like a good fit to me.

William