diff --git a/minidns-core/src/main/java/org/minidns/edns/EdnsOption.java b/minidns-core/src/main/java/org/minidns/edns/EdnsOption.java
index fb02b9b5..dfc75e17 100644
--- a/minidns-core/src/main/java/org/minidns/edns/EdnsOption.java
+++ b/minidns-core/src/main/java/org/minidns/edns/EdnsOption.java
@@ -28,6 +28,7 @@ protected EdnsOption(int optionCode, byte[] optionData) {
         this.optionData = optionData;
     }
 
+    @SuppressWarnings("this-escape")
     protected EdnsOption(byte[] optionData) {
         this.optionCode = getOptionCode().asInt;
         this.optionLength = optionData.length;
diff --git a/minidns-dnssec/src/main/java/org/minidns/dnssec/DnssecClient.java b/minidns-dnssec/src/main/java/org/minidns/dnssec/DnssecClient.java
index 2f0ec712..2071e384 100644
--- a/minidns-dnssec/src/main/java/org/minidns/dnssec/DnssecClient.java
+++ b/minidns-dnssec/src/main/java/org/minidns/dnssec/DnssecClient.java
@@ -504,7 +504,7 @@ protected String isResponseAcceptable(DnsMessage response) {
      *             the DNSKEY record for the domain and using the key with first flags bit set
      *             (also called key signing key)
      */
-    public void addSecureEntryPoint(DnsName name, byte[] key) {
+    public final void addSecureEntryPoint(DnsName name, byte[] key) {
         knownSeps.put(name, key);
     }