@aljoscha PSA: future me turning evil was explicitly part of the threat model: my nodeconf.eu 2014 talk, Secure Database Games (am wearing a lab coat because it was the mad science track - lots of premium hand waving in this talk if you like that sort of thing)