Fix: categories were not private (conflicting risk)