...
Automated detection of non-private nested classes that define non-private members and constructors is straight-forward. However, this guideline applies only applies when those classes could potentially expose sensitive data or operations from the outer class. Detection of sensitive data or operations requires programmer assistance.
...