Maintaining control over sensitive data in the Physical Internet