enforce restriction of single sub-function