users can now be private