How to Act Without being Observed: Progressive Privacy Architecture in Desktop-as-a-Service