Okay, I see where you're coming from. But that should be at most access=customers. It's not private, it's still a public place. You don't need to have "individual permission" like the wiki specifies for access=private. I'd suggest changing the paths to access=customers as well.