Comments: Flexible, but Secure Access Control in Cloud Storage