This sets up separate rules and access permissions for that subdirectory. Your partner should no longer be able to access any pages in the private directory (or any sub-directories of it)from external machines, but your other internal machines (including your host) should still have access.