gid's verify_chain makes sure that parent GID's hrn is a prefix of current GID's hrn