restricting permissions on card names+discussion