Fix Private OFA

[dmarzzz]

I believe the private OFA example is messed up because we're not submitting the backrun on newMatch but instead when we call a separate function. Also passing the builderURL in from outside world means you can point it to a non-TEE builder and leak the data.