SHAD: A Human-Centered Security Architecture for the Plan B Operating System