A suggestion we got from Adobe was to put a task at the top of all templates for Team Only Updates. Then after converting a request to a project, remove all inherited permissions from that task. Then only add the group/team/users you want. The make private comments in that task only. In theory, any ...