Use hieradata/private/ as a private config store