I have an XT activity that I want to QA in staging and production environments using the ActivityQA URLs. The problem I'm having is, the activity is visible with or without the qa url, and regardless if the test is live or not.
Obviously I don't want this to be visible to the public before qa'ing. I tried adding a Visitor Profile to my audience (user.AdobeQA) but this seems more appropriate for an A/B activity.
How can I ensure my activity/experiences won't be visible, particularly in a production environment, to those without a QA url?