I have two physical machines with the exact same setup for mdo.
> id
uid=1001(david) gid=1001(david) groups=0(wheel),5(operator),44(video),1001(david)
> groups
wheel operator video david
> sysctl security.mac.do
security.mac.do.rules: uid=1001>uid=0,gid=0,gid=5,+gid=0,+gid=5...
