So much for "trust, don't track"