Preservation of epistemic properties in security protocol implementations