This is what "protected" is for in other OO systems. The stuff you want hidden even from the subclasses is marked private, the stuff you want them to have access to is protected, the stuff you only want to access within the library is internal and only the stuff that's supposed to be ... erm ... public is public.

private and public on their own is NOT enough.