Contextual Integrity for Computer Systems