Constant PRIVATE 

pub const PRIVATE: [&str; 2];

Unsigned keys served to the event’s own sender and to nobody else.

Every serving path strips these unless the requester sent the event, and federation strips them always. A redaction keeps them for the sender.