Confidentiality for Mobile Code: The Case of a Simple Payment Protocol