Ok, alias for private service is public by default.
The alias is removed for factory because SPI cache is not longer controlled that way, instead one needs to configure cached/uncached storage.