Imagine a "Security team" project dedicated to handle security reports. We need a workflow making possible for non-members to create tasks to report security issues to that project. We also need to consider a scenario where a non-member is eventually CCed to a private task, obtaining permissions to view and comment.