20837: Make saved groups private by default. Move CDS group updates into app.