How Excavator Search Can Protect User Anonymity