secure from direct access
moved init