When trying this out I got a couple of exceptions when starting the app server up.
Stuart pointed out that these should probably be `[private,loggedin,public]`