ZenStack: Secure Auto-Generated CRUD API for Databases