“The problem is that the logic of “need to know” depends on the assumption that somebody—some manager or algorithm or bureaucracy—actually knows who does and does not need to know which material”