Make upgrade task
Add test
lock down subgroup privacy options when creating subgroup