new repos should be private by default

#80895204