XML and Privacy: Mutually Exclusive?