actually it is created in the scripts section of "system-user-root". rpm -q --scripts system-user-root would create a /etc/group file (if NOT present yet) with a trusted user. Question is if the live cd image builder does that differently.