Added Private RR support

(something that Miek's and my fork had in multiple branches)
I think we should swap the name to `PrivateRRRemove` (`remove` to be in sync with the handlefunc naming in server.go).