Securing history: Privacy and accountability in database systems