Protecting an object’s internal state - Eustad