A fault- and intrusion- tolerant file system