Provide a default scope for posts of visible, to mitigate mistakes - but still be explicit in both front- and back-end controllers for clarity of intent