restrict inner class access