I'm cross posting an issue here to let you guys know of this way:
Banner.module isn't really guilty here. There are a lot more modules that do not work with private file access.