Privacy-preserving Security Policies, Protocols and Architectures