Similar to disk enceyption? Encrypt the message text with a master key, encrypt the master key with each user key, and include the ID:encKey pairs in the event.

The big downside is an interested party could track which user IDs were participating in the group chat. Probably better to start fresh with a new NIP type.