Oh nice, didn't know about this feature. It's probably worth double checking we are not letting access to private files.