Private to the public, accountable to the auditor: the same transaction, two views.
Shield's AUDITOR_TOKEN. It is only sent to Shield's API.