[IshKebab]

I don't think that works if the private packages depend on public ones, which is quite likely.

[failsecured]

You are completely correct. I neglected to mention that we mirror/cache the dependencies we need in our private index.