private_arguments option should raise an error if the given arguments are not private

[zachdaniel]

We should also introduce set_private_argument that does this same behavior. This is a layer of protection over someone making a private argument public, and then not realizing that some external place setting a private argument could actually be allowing overwriting with input.