Safer metadata access from controllers