What if software components carried a personal certification number instead of just an organizational signature? Accountability and privacy don't have to compete.