Otherwise any public method in the managed class can be called regardless of whether it's marked as a @ManagedOperation or not.

Possibly too, @ManagedAttribute methods should not be able to be called via invoke(). Need to double check this.