I'm all in favor of "correcting" the use of private here, as well as with the aggregates hash. Protected is the way to go for the API, especially since it's just a flag. HOWEVER, anything listed as private before should stay private (unless @davglass  or @ericf say different) and anything new should be listed as protected.