forbihidden: internal access only