Fix a bug where we aren't enforcing good permissions for private drafts