spec public private networks with group membership

implements blueprint public-private-networks-with-group-membership

Change-Id: I5dde79718419facf2dfd5d70be1fcd1b2d5e7af1
Merge "spec public private networks with group membership"