Consistent query answering under primary keys: a characterization of tractable queries