should `access_log` be public?