why protected and not private?