Fencing: Keeping Privacy in Without Shutting Buyers Out