// a dangerous function
protected function dangerous() { 42 }
// a bit of code
function code() { dangerous() }
// an innocent bit of client code
client function malicious() { code () }