lock down subgroup privacy options when creating subgroup