Some package managers have a private field that helps avoid accidentally publishing a private package to a public registry. We should have the same sort of field in Wally.