Mark validation methods private

Also move class/scope methods to the top of the list to make them easier
to spot