A Correctness Proof for the Volpano/Smith Security Typing System