Rustdoc: Properly strip private modules

A private module will survive the strip-private pass if it contains
trait implementations, which aren't stripped until a separate pass in
render.