Only allow contacts that are in a certain group.
The associated variant in Access_Control is a Group_Handle representing the permitted group.