lock down provider api a little more