A Classification of Software-Architectural Uncertainty Regarding Confidentiality