A proper private relay will require auth from your nsec to read and write, and you could also run it only locally, use a firewall to limit your IP If you host anything that requires a username and password, it can be replaced with nostr AUTH