It is private on some clients, not coracle though unfortunately. Of course, that would make it harder to identify impersonators with web of trust. Tricky tradeoff.