arrrrg....thank you for your time and sorry to have wasted it, you are entirely correct (not that you need me to tell you that). The problem was between keyboard and chair as I was checking the wrong security group. I was missing a "!" as there is one group with that and one group with out.

time for more coffee.