a definition (now what is the statement of noninterference?)