relax private post checking. only skip activities if we *know* they're non-public
drop propagate tasks if the response or activity is non-public