generated image URLs are not private-URL-aware

I'm using private URLs on my website, and have made the /files directory inaccessible. The Image module is correctly displaying its images by using URLs with a /system/files base. However, Image Assist seems not to be aware of this behaviour, and instead tries to use /files to display all inline images, and nothing gets displayed.

If I allow access to /files, there is no problem :)