That's a good call out, we have not established a 'bar' for private data or a process for discussing/approving things that fall close to the bar. I suspect developing this will be challenging but it seems achievable and the process for discussing can happen in issues.