Now that Beaker has the notion of "group owners", most groups are expected to always have at least one owner (apart from legacy groups that existed prior to upgrading). But by default the "admin" group is created by beaker-init with no owners.

When beaker-init creates the first user account and adds it to the "admin" group, it should make them an owner of the "admin" group too. That way, for all new installs, the "admin" group will have an owner.