Make plugin tests respect `private_access`

[kvfairchild]

is there a way we can run both? e.g. in vision we first run all public (not private_access) and then all private (private_access)

Like this? (Current version)