Opacity-enforcing supervisory strategies for secure discrete event systems