runtime: replace public ports entry w/ private table