Toward a Practice-Based Approach to Privacy Literacy