Privacy

This first shell does not yet define a production privacy policy, but the route exists now so the trust surfaces are in place.