Solving this surely requires explicit support for testing at the language level, eg. a "private testable" scope.