Private Room refactor - Distinguish hidden and secret rooms

I'd say let everyone retain rank. If you really want to hardcode, use `userGroup === '+'`. `.can` is moderately expensive.