what security/privacy features would you include in the design according to MoSCoW method?