incomplete implementation of privacy control for singular flag lists