Manual:$wgResourceLoaderInlinePrivateModules

Details
Whether to embed private modules inline with HTML output or to bypass caching and check the user parameter against.

  to prevent unauthorized access to private modules.