update: private.nix