private / password required