This simple game shows why metadata laws won't protect whistleblowers