Couple of questions ...
1. Does sitemap refer to /robots.txt and not include URL's that have been disallowed within robots.txt?
2. Is there a method to not have page nodes appear within sitemap, when you're not showing them on your site?
I have a page node, with no HTML, that is a parent node/category. It's permissions are set/ticked for it to be a private node. When I check Analyze Permissions on the node for guests and a member, View Node is No. Yet, the URL is still be included in the sitemap.