Setup private directory for confidential files

Fixes a few roles for this and a typo