RFC: private by default for values

A shower thought here is that when using an export keyword to make something public, you are also required to fully type annotate. This means we could implement a shallow parsing phase to detect the same information that a signature file would contain.