I'd say groups are better because the setting is then embedded in the code rather than in a separate file which a variable would be. It's also 'safer' in case the variable gets unset by a curious user or bad code (ie. unset %*).