Why a surrogate PK in the User/Group table? A significantly more technical sounding title and teaser lead to a much different article than expected.