Making artifact uploads private by default