Sorry, website is closed for public.
I actually understood the root of the "problem".
While event is invisible when unauthorized people try to open it, the posts on events wall are still visible publicly on General wall. So discussion cannot be private.
I think this is unexpected behaviour. Hidden event should be hidden absolutely I guess.
Can someone reproduce this?