The documentation stage1-implementors-guide.md defines the parameters for the stage1's run entrypoint:

But it does not match the implementation in init.go: --private-users is not documented.

We should either document it, or get stage1 to infer it from the PrivateUsersPreparedFilename file.