Hide more APIs with Internal.access.

The callsite is uglier but the API is neater. I think overall
it's a small win.