The router should only attempt to access public methods of controller objects.