Protecting sensitive information from improper disclosure or corruption is a longstanding, fundamental goal of computer security: but it is one that is not currently being achieved well at all, as is evident from continual news reports of large-scale data compromises.