fix perms, add hostgroup geodns