if you have a login, allow private entries.  (this really needs to be oath)