Should we create some additional concept between api / spi and impl? Something like friend?
While I like that concept between ORM and OGM for example, it's a bit of a shame to have to express that between modules.

In OSGi when a package is exposed is that for everyone? Can't you say which module you expose to?