If the root user starts spamd with the --username flag, the supplemental group list of the spamd worker processes is never changed. The worker processes execute with root's original supplemental group list.