GCVE BCP-06 drafting - Requirements and Evaluation Criteria for GCVE Numbering Authorities

Following a discussion with one potential GNA, would it possible to have a model for private publication only? Where vulnerabilities are only disclosed within a specific user group and never published.