Tests that verify private group field is not publicly viewable

Note: Please do not merge until the credentials.yaml file has been updated.