Refactor group privacy settings (rename viewable_by to privacy)