In which type of class methods is it typically necessary to filter invalid arguments (either directly or indirectly with helper methods) in order to protect private data of your user-defined class?