adding post on treating your private api like its public