Ask HN: What's hardest about keeping PII out of unnecessary systems?