Bug fix:

Module should not by default serve private files as cacheable.

New features :
- Introduces hook_private_download_access() that allows modules to override the general 'access private download directory' permission.
- Allow Content-Disposition: inline.
These 2 features are still experimental and incomplete. They will be documented once complete.