Wrap an enumerable so that clients can't get to the underlying implementation via a down-case