@nprofile1q... @nprofile1q... strict separation between credentialed access (can't modify self) and the rest of the code (can modify self)