Part of lp.services.privacy.adapters View In Hierarchy
It relies on the fact that all our objects supporting privacy use an attribute named 'private' to represent that fact.