setPrivate.
The implementation does a separate check for whether the object
is setPrivate, and there is a separate continuation policy
for failed attempts to access one.
As with document.ACL, we only allow the script that created a
document to set or unsetPrivate objects.