Don’t have privacy levels be defined at module import.

This lets us change them during tests
Fix paths for production media