The correct (IMHO) solution is to ensure that groups are federated. First, ensure that groups can be addressed specifically, eg. !group@sn.j[…]