Adds PBFT and threshold-protected labels to sensor fusion, so the untrusted server can't collude its way through privacy.