Alternative way to make signals private
By using QPrivateSignal as an extra arg to ensure users and sub-classes
can't emit them, c.f.:
Note that this is needed to make it compile at all with the PMF signal/slot
syntax, if it's a private method we can't call it in the lambda (which IIUC
means it didn't work at runtime with the SIGNAL/SLOT macros too).