make one node public, restrict the rest