Limit 'extern' to trusted code