Defining Security for Relativity Databases