No event for private repositories should appear in public feeds

It seems that actions on private repositories appear nonetheless on public feeds (at least on the repository's owner's page), leading to private information leak (commit messages, activity, etc...)