are methods within the API automatically private? It'd be great if we could enforce that.