Discretion as a service: how good restaurants deliver privacy without walls