Make upgrade task
Add test
lock down subgroup privacy options when creating subgroup
Fix spec
fix cuke