- the exact scripts that are run by `run-private-scripts`
is not disclosed here
- the private scripts were adjusted so that they can be run
as often as desired and always result in the same idempotent
result
- consequently, the private scripts are now always triggered
by `update-machine` as well