cinder-hidden-consistency-groups

Currently when consistency groups are created they are owned by the tenant and
can be modified freely given the correct role. This means that if a consistency
group exists that is part of a tenant policy the tenant can change it directly
without going through the policy owner. This in turn can cause issues with the
entity who manages the consistency group. Further more, the user might see
consistency groups that they did not create and might choose to delete it.