Add private flag to UserGroups

Closes #355