Users of a library can be restricted using the SECURITYTYPE file attribute of the library's object code file. If the SECURITYTYPE value is PRIVATE, then any nonprivileged process that uses the library must have the same usercode as the library. If the SECURITYTYPE value is GUARDED or CONTROLLED, then a guard file is used to restrict the nonprivileged library users.