Don't put private keys in the root manifest!

I'd swap this and call the other one `SerializePrivate`