That sounds like the start of a plan! In more detail, how would this scenario work?
Subsite:
In an after_instantiate callback we'd create "News admin", "Forum admin", etc, groups.
News:
In an after_instantiate callback we'd grant "admin" to the subsite's "News admin" group on the News package_id (the package_key, that is).
...and on and on with Forums, etc...
Would this work if you mounted a second and a third ... subsite, where a new group with the same name (News admin, for instance) would be created?
