[FOLLOWUP][SECURITY] Disallow unauthorized module access