Tazman

This answer makes it seem like it’s not possible. A private vlan is a vlan within a vlan, so I’d be real surprised if just tagging a vlan is enough.