We could do it at a module level or even down to a class level if necessary, though I think module is easier and if a module doesn't need to be fully covered, then the uncovered parts should be split out into the private API