The docs say:

Any key in a hash which starts with a '_' or '.' character will be considered private and cannot be evaluated or updated from within a template.

update: but

You can disable this feature by setting the $Template::Stash::PRIVATE package variable to a false value.

$Template::Stash::PRIVATE = undef;   # now you can thing._private