The question is: do you use a auth_groups to manage internal working
of the app or not? For example to you have user roles like "manager"
or "admin" etc. If so you may want to expose a different mechanism to
users. If you can use auth_groups (because you are not using it
already or you you plan to add checks to avoid conflicts, by all
means, you should use that, as it will save work later.
Massimo