marked assembly to allow partially trusted callers