better explanations in .privacy (thanks Noah!)
support commands with "private prefixes"