403=404, fix private dirs