WIP fix(private): make private content private

there are still have some behave tests to be fixed
Better to put this in `apps/content.py` ?