Add note about when to include private key in DSNs