If we do #1, there really should do a "openest using entry" or whatever option.

#3 is a really really bad idea, as someone might want to be able to check at a glance if a tag that they do not want public accidentally got associated with a public entry.