add privacy mode to discussions in preparation for authorization control

[techsmyth]

Only adding flag for now; usage + modes depend on further discussion. Slight improvement in authorization policy effectiveness.

Moved anonymous read access to child entities; not on platform level itself.