Move private.yml to prevent Bosh release upload confusion with invalid credentials