Exploring the Enforcement of Private, Dynamic Policies on Medical Workflow Execution