How to Protect Sensitive Content in the Vendor Neutral Archive