Can't trust users, limit scope to public methods