I should be able to define a Space as Hidden
Summary: Currently, we decide whether a user can access a Space at all by checking their Read access to the Space Root. (In ClientApi.requestInfo.) This really should be a separate flag, at the system DB level, which says whether non-members can even see the existence of this Space.