fix #8977 The visibility change cannot be wider than the default privacy. (If default privacy is 'unlisted', visibility can only be changed to 'private' and 'direct')