switch private by default per principle of least access