place files in the *private* folder to signify that they are internal and not publicly accessible