Reconciling privacy and security