figure out the best way to indicate that a private project is not embeddable. a message on the embed modal?