You have to somehow expose that method to make it available to QUnit.
I wouldn't worry to much about private scopes. If you properly document your plugin, it'll be clear which methods are in the public API, and which aren't. If someone ends up using a private method, he's probably willing to migrate when you change that method.