This is somehow getting very odd... I set one category to "private"
View attachment 325
Then setting the primary user group (which is not "registered" but "club members" – to distinguish between club members and ordinary visitors) to this:
View attachment 326
Now the category vanished from the category widget... it almost seems there is almost a reverse logic in the ticket permissions' logic...?