Seol mar théacs é seo: A separation-of-powers model for a trustworthy and open cloud computing ecosystem