1. A non-transitory machine-readable media having code for execution on a machine, the machine when executed performing a method comprising: receiving, by the machine and from a principal service an identity for a principal that is associated with a search being performed by a search service and receiving return search instructions in a first encrypted format, the identity of the principal is masked or aliased preventing disclosure of a true identity for the principal; acquiring, by the machine and from the search service, search results in a second encrypted format for the search that was executed by the search service on behalf of the principal; and sending, by the machine and to the principal a decrypted version of the search results in accordance with the return search instructions.
1. A non-transitory machine-readable media having code for execution on a machine, the machine when executed performing a method comprising: receiving, by the machine and from a principal service an identity for a principal that is associated with a search being performed by a search service and receiving return search instructions in a first encrypted format, the identity of the principal is masked or aliased preventing disclosure of a true identity for the principal; acquiring, by the machine and from the search service, search results in a second encrypted format for the search that was executed by the search service on behalf of the principal; and sending, by the machine and to the principal a decrypted version of the search results in accordance with the return search instructions. 6. The non-transitory machine-readable media of claim 1 , wherein sending further includes sending the search results to the principal in the second encrypted format, which was acquired from the search service and wherein that second encrypted format was encrypted by the search service using a public key of the search service and not known to the processing of the method.