How to capture, model, and verify the knowledge of legal, security, and privacy experts: a pattern-based approach