Move over to default_scope for hiding private content. Fix a few security issues. Remove global-feed, and improve export.