Answering my own question:
The source is indeed the proper place. The ant scripts have a specialtarget for building the javadoc for the private API:
ant privateapi
the docs go into build/privateapi
Kind regards:al_shopov