Lock down internal APIs