Notes towards an Open Source Java privacy/security/repair suite