Bulletproof business process automation: securing XML forms with document subset signatures