Hopefully you found an answer by now, but we just identified the same
issue with Radius and wasted 3 days tracking it down. There's a check
box on the Radius setup called "Apply to All Groups" that needs to be
unchecked ... that will make it not bypa...
