https://5dok.net/document/ky67g3gq-static-flow-based-declassification-legacy-untrusted-programs.html