Improve the API description of `PodSecurityContext.SupplementalGroups` to clarify its unfamiliar behavior