Suppress private apis from the Swagger output

Suppress `@Api private` REST APIs from the Swagger output
Need a line of documentation that explains what's happening here