Deny access to modules directly

There is no reason to access any module directly. So lock down. Any module should communicate thru the interfaces and framework.