Xauth is currently defined globally on the PIX, so at this point, no, it is not possible to have different authentication mechanisms for different groups.
This feature has been mentioned. I would suggest contacting your Cisco AM or SE and have them put in a feature request for it, the more people that ask for a new feature the quicker it gets put in.
