Why would you codify a set of safeguards you might want to change as technology evolves and you face new risks of privacy, in addition to changing safeguards that might need to be relaxed in an emergency situation?