This is going to be a strange one. I have a new instance of IPA I am standing up, and did an migrate of users and groups from a prior IPA instance. In the old instance, all of the user private groups were hidden in the WebUI, but do still exist in the server, since I can find them with ipa group_show and group_find. I've done some digging, but I'm still unsure how to replicate this behavior on the new IPA master. The new IPA is on 4.5.4-10 for reference. Any help will be appreciated.