Tighten /privateroom permissions