Make (most) globals writeable only from a single module.