for the first time is interpreted as a user signing up to a service. Similarly, Tdata transactions govern read/write operations. With the help of CheckPolicy, only the user (always) or the service (if allowed) can access the data. Note that in lines 9 and 16 of Protocol 4 we used shorthand notation for a