have a way to label folders for read/view defaults at a folder inheritance level

This change was made: GRP-917 default group read/view privileges to not be globally public

But maybe some folders (and subfolders) should have different behavior. Maybe the registry should default to open, but the courses folder should not. Also need to see what the behavior of the API/WS is, and if this is a UI only thing. Should there be a config to disable this so on group create you dont have to walk the folder parents?