Providing Legitimacy without Sacrificing Privacy