Protecting confidential information from internal threats