@robguthrie, I've made one additional change - setting the default privacy of subgroups with secret parents to secret. Is this an ok method?