Is HIPAA Compliance Possible in the Public Cloud?