Right now, the macro enforces “every public-ish method must have either #[no_access_control] or #[authorized_by(..)]”. Since pub(create) Fns are only publicly accessible within the current crate, they cannot be accessed as part of the public API and should be eliminated from the enforced functions.