Secure distributed objects with promises