PUBLICATION: Verifiable document redacting © Springer. Personal use of this material is permitted. The definitive version of this paper was published in and is available at : http://dx.doi.org/10.1007/978-3-319-66402-6_20 Document