Ensuring 'nobody' data doesn't leave device, #50