Sensor selection for fine-grained behavior verification that respects privacy (extended version)