Ah I see! I misunderstood, didn't realize that it's pointing to the Hub. I assumed the more strict sense of 'private' :) The Docker-provided registry softwar

Ah I see! I misunderstood, didn't realize that it's pointing to the Hub. I assumed the more strict sense of 'private' :) The Docker-provided registry software is limited in terms of "don't go here". You get all of upstream, essentially Quay or Harbor are more configurable in that regard, but I'm less familiar. We're privileged, being already very-offline and signature heavy... and that's someone else. I just run the systems/services!