Private Registry Support

This might be a nit... but wouldn't be more accurate to call the configuration key `registries`