Default to `private` room visibility rather than `public` when a client does not specify one, according to spec. (#12350)