Upstream oauth2_proxy does not support Google Group authorization for
members of the group who are from a different domain. Fortunately this
is pretty easy to add.