When a page is included the relation references/haspart metadata should always contain this page even if the page or the page isn't public. This is important as otherwise the pagemove plugin can't find the reference in the index and there is also no need to exclude this information for security reasons.
It could even make sense to do the same for namespace and tag includes as unauthorized users can't see the backlink information for pages they can't access and for authorized users it would be nice to have it.