Secure, Expressive, And Debuggable Large-Scale Analytics