Unpacking Google’s Web Environment Integrity specification