anchor.diff:  
   Creating an origin with the `hab origin create` command registers the origin on Chef Habitat Builder without creating an origin key pair. The `hab origin key generate` command creates the key pair and saves them in your local environment, but it does not upload either origin key to Chef Habitat Builder.
   
  +* You can only upload new keys to origins in which your are an "administrator" or "owner".
   * Builder requires the public origin key to upload artifacts for that origin, so you'll need to upload it.
   * Builder requires the private origin key to enable new artifact builds from packages with plans linked to that origin.
   
  
positive.code: | Transfer Origin | N | N | N | N | Y |
  | Delete Origin | N | N | N | N | Y |
  
  ### Manage Origin Members in Builder
  
  In tandem with the changes to the Builder membership roles, we've also updated the `hab` CLI to support RBAC. We're working on adding role management to the Chef Habitat Builder site, but in the meantime, you'll need to use the CLI for now.
  
  ![Manage origin members](../images/screenshots/origin_members.png)
  
  ### Manage Origin Membership with `hab origin invitations`
  
  
negative.code: * Default Package Settings
  * Origin Secrets
  
  Everyone with origin membership can see the _Settings_ tab, but only origin administrators and owners can add, update, or delete settings content.
  
  | Action | Read-Only | Member | Maintainer | Administrator | Owner |
  |---------|-------|-------|-------|-------|-------|
  | **Origin Settings** |
  | View settings | Y | Y | Y | Y | Y |
  | Add/Update/Delete settings | N | N | N | Y | Y |
  | **Origin Secrets** |
  | View secrets | N | N | Y | Y | Y |
  | Add/Update/Delete secrets | N | N | N | Y | Y |
  
  ![The administrator or owner's view of the origin settings tab with a public default package setting and a saved origin secret](/images/screenshots/origin-secrets.png)
  
  ### <a name="package-settings" id="package-settings" data-magellan-target="package-settings">Default Package Settings</a>
  
  The _Default Package Settings_ define the visibility of build artifacts (.hart files). Everyone with origin membership can view the origin settings, but only origin administrators and owners can add, update, or delete settings.
  
  * Public packages are visible in search results and can be used by every Chef Habitat Builder user
  * Private artifacts do not appear in search results and are available only to users with origin membership
  
  Change the default setting for the origin by switching from **Public artifacts** to **Private artifact**. The default setting required for each origin and users with more than one origin can set some as public and others as private. Packages can have different default visibility settings than their origin's. Change the default visibility setting in for individual packages in that package's setting tab (Builder > Origin > Package > Settings).
  
  ### <a name="origin-secrets" id="origin-secrets" data-magellan-target="origin-secrets">Origin Secrets</a>
  
  Everyone with origin membership can view origin secrets, but only origin administrators and owners can add, update, or delete settings. located on the bottom of the _Settings_ tab (Builder > Origin > Settings > "Origin Secrets") let you encrypt and store secrets as environment variables. Origin secrets are useful for plans that require access to protected resources at build time, such as private source-code repositories and cloud storage providers.
  
  Origin secrets are retained by the origin and are available for any of that origin's packages. The origin secrets in your local environment are encrypted with an origin encryption key. Only Chef Habitat Builder can read encrypted origin secrets.
  
  