Suppress private apis from the Swagger output

Suppress `@Api private` REST APIs from the Swagger output
Shouldn't be here. I'll follow up.