What you lose is what you leak: Information leakage in declassification policies