Adam Barth John C. Mitchell Enterprise privacy promises and enforcement. 58-66 2005 WITS http://doi.acm.org/10.1145/1045405.1045412 conf/popl/2005wits db/conf/popl/wits2005.html#BarthM05