Email Record: What happened to formal methods for security?