Fix: redirect private URIs if loadout is not private.