model: privatize a few interfaces