Just wondering, if I do it by calling a pure back-end suitelet, will access to that suitelet only be limited to other suitelets? Just wondering how I can keep it secure 🙂