post_install() {
    if [ $(getent group onepassword-cli) ]; then
        : # no-op
    else
        groupadd onepassword-cli
    fi
    chgrp onepassword-cli /usr/bin/op
    chmod g+s /usr/bin/op
}

post_upgrade() {
    post_install
}