Tamper-Evident Data Structures in .NET