"""Provider-independent privacy primitives used by MaskGate."""