1. A non-transitory machine-readable media having code for execution on a machine, the machine when executed performing a method comprising: receiving, by the machine and from a principal service an identity for a principal that is associated with a search being performed by a search service and receiving return search instructions in a first encrypted format, the identity of the principal is masked or aliased preventing disclosure of a true identity for the principal; acquiring, by the machine and from the search service, search results in a second encrypted format for the search that was executed by the search service on behalf of the principal; and sending, by the machine and to the principal a decrypted version of the search results in accordance with the return search instructions.