But it’s private in that the identity of the nsec user is private 

Or at least that’s what I meant