Duplicating reports makes them visible to all by default

When creating a report, we now give no access to anyone. However, when you duplicate a report, we are still granting access to the whole org. I would think we want the same functionality everywhere.