moving journal-private to journal risks losing other lines from the log files
annex.private is a bit ambiguous about what kind of privacy, but it keeps the name symmetric with remote.foo.annex-private.