Making programs forget: Enforcing Lifetime for Sensitive Data

   Abstract