Couple of fixes for private repos
    
    - Ensure we do not expose private git repo via https. (CVE-2018-1002153)
    - Ensure we do not log activity on private projects.
    
    Fixes https://pagure.io/pagure/issue/3302
    
    Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>