Dealing with public risk in private infrastructure