Make variables private.
Make Injector public so middleware can inject state.