The limits of promising confidentiality