core-4748 dont allow workflows with private apps to be submitted for
public use.