Protect non public method calls with admin role