Renamed the method to _checkForEntityAssertions() and made it protected to show it was clearly not meant to be called from the controller.