Closes #449 by introducing a dialog prompt to let users confirm their
intention to set the group as private. Then, the setting is locked in
client- and server-side.