Caution when designing whistleblowing tools