implement optional private flag for configuration snippets

@cjeanneret, OK for you ?