Security: restrict package access