…only one of them is private on the WAN