base-files: split user/group addition code into a function