A card requirements language enabling privacy-preserving access control