In 11.3, are server reponse cache-control headers ignored?

a response with cache control header - private was apparently serving from the LTM cache. Is this expected?