@aha@swiss.social agreed, that‘s the more sane option than trying to duct-tape only the OCI image visibility.