Why We Shouldn’t Trust the NSA with Our Metadata