store PII in private.mk so we can have an install target here.