Use workflow registry in stead of fixed spoke-bound workflow
Implement a non-public workflow
properly disable tests
warn about is_visible deprecation
initial local role support