Describir: Cerberus, an Access Control Scheme for Enforcing Least Privilege in Patient Cohort Study Platforms.