toeing the line between privacy and security