must be protected, not private, for Guice