"Disable serving of private files" as default

This settings is hidden in the imce configuration (well under a collabsibel fieldset),
it can be very catastrophic if its not set as default to disable serving of private files - all files are now accessible if you have the direct file name.
if this setting is not set, imce is basically breaking drupals private files handling.
its very confusing to find, especially that a user forgets that imce could have anything todo with a filefield, i sure did :(

By setting "Disable serving of private files" as defailt this problem goes away & if a user want to have imce to play with the private files it can be done but with an action, instead of now where its not that obvious

cheers :)