Privacy and Security by default