Function flattening for lease-based, information-leak-free systems