Currently, when a form field is prefixed with private- (such as private-submitted_email), the data associated with the field won't be sent from the API to the client. This is useful for keeping sensitive user information safe.
But it also means that logged-in editors cannot edit private form fields in the application's editor. Do we want to give editors the ability to edit private data? If so, I think it will require changes on the API side.
@futuresoup -- do you think there's a strong use case for this?