Casanova: a declarative language for safe games