Add visibility: to limit access to lua.

lua was only approved for this specific use, so try to prevent folks
unknowingly adding extra dependencies on it.

Test: treehugger
Change-Id: I52ca509dfbc50851993f78eef008ea456296ff26