[share]
    ...
    # Directory hiding for unprivileged users
    # Works based on pattern matching (incl. sub-directories)
    veto files = /_private/
    include = /etc/samba/include/allowprivate.conf.%U