protect against leaking private data