Prevent widgets from being made embedable on private sites

From #4632.