Question about child contracts. What prevents someone from calling a child contract directly? For example of there is a "managing" contract that creates many instances of a child contract and tracks them etc, what prevents someone from circumventing the "manager" and just using the child contract directly?