People Categories: Formal Methods for Security