note on proxying private repo releases